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Testing equivalence was originally defined by De Nicola and Hennessy in a process algebraic set- 
ting (CCS) with the aim of defining an equivalence relation between processes being less discrim- 
inating than bisimulation and with a natural interpretation in the practice of system development. 
Finite characterizations of the defined preorders and relations led to the possibility of verification 
by comparing an implementation with a specification in a setting where systems were seen as black 
boxes with input and output capabilities, thus neglecting internal undetectable behaviours. 

In this paper, we start defining a porting of the well-established testing theory into membrane 
computing, in order to investigate possible benefits in terms of inherited analysis/verification tech- 
niques and interesting biological applications. P Algebra, a process algebra for describing P Systems, 
is used as a natural candidate for the porting since it enjoys the desirable property of being composi- 
tional and comes with other observational equivalences already defined and studied. 

We consider P Systems with multiple membranes, dissolution, promoters and inhibitors. Notions 
as observable and test are conveniently rephrased in the membrane scenario, where they lack as 
native notions and have a not so obvious mean. At the same time, concepts as promoters, inhibitors, 
membrane inclusion and dissolution are emphasized and exploited in the attempt of realizing a testing 
machinery able to formalize several features, which are proper of membranes and, as a consequence, 
worth being highlighted as basic observables for P Systems. The new testing semantics framework 
inherits from the original one the ability to define qualitative system properties. Moreover, it results 
to be suitable also to express quantitative aspects, a feature which turns out to be very useful for the 
biological domain and, at the same time, puts in evidence an expected high expressive power of the 
framework itself. 

1 Introduction 

Membrane computing, the research field initiated by Gheorghe Paun [221I2QL aims to define compu- 
tational models, called P Systems, which are inspired by the behaviour and structure of the living cell. 
Since its introduction, the P System model has been intensively studied and developed: many variants of 
membrane systems have been proposed and regular collective volumes are annually edited. 

The most investigated membrane computing topics are related to the computational power of different 
variants, their capabilities to solve hard problems, decidability, complexity aspects and hierarchies of 
classes of languages produced by these devices. 
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In the last years, there have also been significant developments in using the P systems paradigm for 
modelling, simulation and formal verification [11]. Although such topics have been exercised to different 
classes of P Systems Q, testing has been quite neglected in this context. 

1.1 Testing and P Systems 

Testing P Systems has been so far considered by using certain coverage principles. More often the 
rule coverage is utilised, by taking into account different contexts. Such contexts - typically grammar, 
automaton and model checking techniques - are described in depth in lfl4l [131 : 

- {Grammar-based methods) In order to test an implementation developed from a P System spec- 
ification in a grammar-based method, a test set is built, in a black box manner, as a finite set 
of sequences containing references to rules. Although there are similarities between context-free 
grammars utilised in grammar testing and basic P Systems, there are also major differences that 
pose new problems in defining testing methods and strategies to obtain test sets. Some of the 
difficulties encountered when some grammar-like testing procedures are introduced, are related to 
the hierarchical compartmentalisation of the P System model, parallel behaviour, communication 
mechanisms, the lack of a non-terminal alphabet and the use of multisets of objects instead of sets 
of strings. 

- {Finite-state machine methods) Finite state machine -based testing is widely used for software test- 
ing. It provides very efficient and exhaustive testing strategies and well investigated methods to 
generate test sets. In this case it is assumed that a model of the system under test is provided in the 
form of a finite state machine. In the P System model case, such a machine is typically obtained 
from a partial computation in a P System. 

A different approach uses a special class of state machines, called X-machines. Given that the 
relationships between various classes of P Systems and these machines are well studied [1] and 
the X-machine-based testing is well developed, standard techniques for generating test sets based 
on X-machines can be adapted to the case of P Systems lfT6l . 

Specific coverage criteria are defined in the case of finite state machine-based testing. One such 
criterion, called transition coverage, aims to produce a test set in such a way that every single 
transition of the model is covered. 

- {Model checking-based methods) The generation of different test sets, according to certain cov- 
erage criteria, can be done by utilising some specific algorithms or by applying some tools that 
indirectly will generate test sets. Such tools, like model checkers, can be used to verify some 
general properties of a model and when these are not fulfilled then some counter-examples are 
produced, which act as test sets in certain circumstances. 

In the case of P Systems, an encoding based on a Kripke structure associated with the system is 
provided for model checkers like NuSMV [17] or SPIN [18]. This relies on certain operations 
defined in [12] and encapsulates the main features of a P System, including maximal parallelism 
and communication, but within a finite space of values associated with the objects present in the 
system. 

The rule coverage principle is expressed by using temporal logics queries available in such con- 
texts. By negating specific coverage criteria, counter-examples are generated. 
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1.2 Our contribution: a Process Algebra-based testing machinery for P Systems 

The community of Process Algebra taught us that the usefulness of formalisms for the description and 
the analysis of reactive systems is closely related to the underlying notion of behavioural equivalence. 
Such an equivalence should formally identify behaviours that are informally indistinguishable from each 
other, and at the same time distinguish between behaviours that are informally different. The authors 
of [4] go toward such a direction, proposing some observational equivalences on a suitable algebraic 
notation of P Systems. 

One way of determining behavioural equivalences is by observing the systems we are interested in, 
experimenting on them, and drawing conclusions about the behaviour of such systems based on what we 
see, e.g., testing the system. Such an approach has been formalized in the Process Algebra setting by a 
suitable testing machinery ITT31 . pivoting on a restricted form of context, called observer. 

The way to exercise (evaluate) a process on a given observer is done by letting the considered process 
and the given observer to run in parallel and by looking at the computations which the running test can 
perform. 

It is worth noting that internal actions of the process under test do not affect, but the case in which 
they lead to divergence, the satisfaction of the test: they are not observable as input or outputs, thus they 
cannot be perceived by an external user that is experimenting on the system. This idea is typical of a 
testing framework: systems are considered black boxes and only observables matter in their comparison. 
This characteristic is imported in the testing notion introduced in this paper. Internal production and 
migration of objects in the P system under test will not be seen by the observer: only the objects injected 
into the system by the observer and the objects that are returned from the system to the observer will 
matter. 

Another typical characteristic of the testing framework, worth underlining, is that the observer must 
have the ability to force the system under test to follow certain paths among all the possible ones. This is 
in order to investigate, for instance, what the system can do after a quite specific sequence of inputs, or 
after a predefined sequence of inputs/outputs. In order to guarantee this possibility, and thus giving the 
equivalence a discriminating power similar to the one in the original setting, in the testing framework we 
introduce in this paper we exploit promoters and inhibitors. Without them the intrinsic nature of P system 
behaviour, in particular maximal parallelism, would have prevented this central feature, thus invalidating 
the porting. 

The characteristics discussed above are central in the idea of testing equivalence. Bisimulation- 
based equivalences, even the weak one, are highly discriminating and do not reflect a practical view 
of "testing" a system: usually, and this is always the case for biological systems, the whole internal 
structure/dynamics of the system is not known, but it is required to check bisimulation. The only way 
to study such systems is to interact with them and analyse what can be observed from experiments, 
with the means that are available. Along this idea, we start with this work the definition of a testing 
framework with the characteristics above, giving initial theoretical results and some simple examples 
of tests, without any particular biological impact. However, we intend as future work to investigate 
and exploit the analogy of the defined notion of testing with biological experiments in order to give more 
evidence of the biological relevance of the work. We can devise, for instance, techniques for experimental 
planning that could be of great interest for experimental biologists, along the same line of the techniques 
proposed in 

In lPT3l . different equivalence relations (e.g., may and must testing equivalences) between systems 
are defined. Two systems are considered equivalent if they pass exactly the same set of observers. Such 
equivalences are further broken down into preorder relations on systems, i.e., relations that are reflexive 
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and transitive (though not necessarily symmetric). Formally, given a process P and an observer o, 

- P may o means that there exists a successful computation from the test P \ o (where | is the parallel 
operator, and successful means that there is a state where the special action ft) is enabled); 

- P must o means that every maximal computation from the test P \ o is successful; 

- The preorder P < S at Q means that for any observer o, Psato implies Qsato, where sat denotes 
may or must; 

- The equivalence P ~ S at Q means P < sa t Q and Q < S at P- 

In [23] and in [ 19] a new testing semantics was proposed to incorporate the fairness notion: the fair- 
testing (aka should-testing) semantics. In contrast to the classical mwsf-testing (semantics), fair-testing 
abstracts from certain divergences, e.g., infinite loops of z (invisible) actions. This is achieved by stating 
that the observer o is satisfied if success always remains within reach in the system under observer. In 
other words, P fair o holds if in every maximal computation from P \ o every state can lead to success 
after finitely many interactions. 

On the basis of P Algebra, the algebraic notation of P Systems introduced in [4] (see Section|2]), we 
adapt for P Systems the testing machinery defined in [ 13] (see Section [3). 

We introduce the concept of context in case of P Systems expressed as P Algebra terms. Using this 
concept, we then define what we consider an observer, which is again a P Algebra term with certain 
characteristics. This leads naturally to the definition of computations of a running test, i.e. a tested 
system running together with an observer. Then, following the classical definition of |[T3l . we define the 
success of a running test in the two well-known versions of may and mwsfj] Finally, the testing preorders 
are introduced, together with the induced equivalence relations. More in detail: 

- An observer consists of a membrane structure in which the skin membrane contains several mem- 
branes (with possibly sub-membranes) one of which is a hole, i.e., a place where another fully 
defined P System can be placed and run. The skin membrane of this tested P System instantiates 
the hole membrane and becomes a full component of the running test. 

- P Systems that are observers are distinguished from P Systems that are normal, testable processes 
similarly to the classical testing approach, where a particular action, called ft), is used to denote the 
success of a test and, if the running test is able to perform this action, then the computation under 
consideration is a successful one. Similarly, in our framework this is easily translated introducing 
a fresh, particular object ft) that, when sent out of the skin membrane of the running test, denotes 
the success of the computation. 

- As usual in testing frameworks, we consider only the behaviours of the running test in which no 
output is produced (this corresponds to considering only invisible action (e.g., t) computations in a 
CCS-like Process Algebra). This is needed to explore all possible behaviours of the tested system 
while running together with the observer. 

An important result consists of the fact that, differently from the original testing semantics frame- 
work, the one proposed here for P Systems results to be suitable to define both qualitative and (above all) 
quantitative system properties. This is mainly because the formalism of P system is expressive enough 
to express both qualitative and quantitative aspects. However, these features are crucial for the biological 
domain. In Section|4] we put quantitative capabilities in evidence defining examples of quantitative tests, 
both concerning time and number of individuals, of a system modelling a population of individuals that 

'in this paper we do not consider fair testing. 
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can reproduce both sexually and asexually. Note that these examples are to be intended only as explana- 
tion of the concepts introduced in the paper and not as examples of verifications in the model-checking 
style. The main direction of continuing this work towards verification is to find finite characterizations 
of the resulting testing equivalence, possibly with respect to suitable classes of observers, and thus using 
them to compare the expected behaviour of a finite state system with its actual behaviour. 

2 Background 

We first briefly recall the definition of P Systems E2l l20ll . Then, we give the definition of the syntax 
and the semantics of the P Algebra as it was presented in JH, where a class of P Systems including 
rule promoters and inhibitors JTOll was considered. The original formulation of the P Algebra, without 
promoters and inhibitors, can be found in [7J that we refer as a more detailed presentation of the 
semantics. 

2.1 P Systems with Promoters and Inhibitors 

A P System consists of a hierarchy of membranes, each of them containing a multiset of objects, rep- 
resenting molecules, a set of evolution rules, representing chemical reactions, and possibly other mem- 
branes. Each evolution rule consists of two multisets of objects, describing the reactants and the products 
of the chemical reaction. A rule in a membrane can be applied only to objects in the same membrane. 
Some objects produced by the rule remain in the same membrane, others are sent out of the membrane, 
others are sent into the inner membranes (assumed to exist) which are identified by their labels. 

In the original definition of P Systems, rules are applied with maximal parallelism, namely it cannot 
happen that a rule is not applied when the objects needed for its triggering are available. Here, we assume 
that at each step at least one evolution rule in the whole system is applied, and also that more than one 
rule and several occurrences of the same rule can be applied at the same step (to different objects). In 
other words, we assume that at each step a multiset of evolution rule instances is non-deterministically 
chosen and applied in each membrane, such that in the whole system at least one rule is applied. This is 
a general form of parallelism that is better suited than the maximal one to describe events in biological 
systems. 

In P Systems with promoters and inhibitors an evolution rule in a membrane may have some promot- 
ers and some inhibitors. Promoters are objects that are required to be present and inhibitors are objects 
that are required to be absent in the membrane m in order to enable the application of the rule. Promoters 
will be denoted simply as objects, namely a,b,c, . . ., while inhibitors will be denoted as objects preceded 
by a negation symbol, namely -<a,-ib, ->c, 

We denote with Sty the set of all possible promoters and inhibitors symbols that can be obtained 
from an alphabet V, namely Sty = V U -iV. Given a set of promoter and inhibitor symbols D, we denote 
with D + and D the sets of objects containing all the objects occurring in D as promoters and all the 
objects occurring in D as inhibitors, respectively. We remark that D + and D are sets of objects, hence 
elements on D will not be preceded by -i. Moreover, with -\D we denote the set obtained by transform- 
ing each promoter in D into an inhibitor and vice versa. As an example, if D = {a,^b,^c,d} we have 
D + = {a,d}, D = {b,c} and ->D = {-<a,b,c, ->d}. 

We assume that all evolution rules have the following form, where u,Vh,v ,v\, . ..,v n are multisets of 
objects, {l\ , . . . , l n } is a set of membrane labels in IN, and D is a set of promoters and inhibitors: 

u -> (v h ,here) (v ,out)(vi , in h ) . . . (v„, in ln )\ D . 
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A rule can be applied only if requirements expressed by D are satisfied. When a rule is applied, the 
multiset of objects u is replaced by V/,, multiset v a is sent to the parent membrane, and each v; is sent to 
inner membrane Promoters are not consumed by the application of the corresponding evolution rule 
and a single occurrence of a promoter may enable the application of more than one rule in each evolution 
step. Similarly, a single occurrence of an inhibitor forbids the application of all the evolution rules in 
which it appears. We assume that the set of promoters and inhibitors D of an evolution rule does not 
contain the same object both as a promoter and as an inhibitor, namely D + nD = 0, and that consumed 
objects u are not mentioned among inhibitors, namely uC\D~ = 0. 

Definition 1. A P System n is a tuple (V,p,wi, . . ,,w„,Ri,. . . ,R n ) where: 

• V is an alphabet whose elements are called objects; 

• p C IN x IN is a membrane structure, such that [l\ , fa) G p denotes that the membrane labelled by 
I2 is contained in the membrane labelled by l\ ; 

• Wj with 1 < j <n are multisets of objects in V associated with the membranes 1, . . . ,n of p; 

• Rj with 1 < j < n are finite sets of evolution rules associated with the membranes 1, . . . ,n of pi. 

2.2 The P Algebra: Syntax and Semantics 

In this section we recall the P Algebra, the algebraic notation of P Systems we have introduced in Q, 
with slight modifications introduced in We assume V to be an alphabet of objects and we adopt the 
usual string notation to represent multisets of objects in V. For instance, to represent {a,a,b,b,c} we 
may write either aabbc, or a 2 b 2 c, or (ab) 2 c. We denote with Set(w) the support of multiset u, namely 
the set of all the objects occurring in u. We denote multiset (and set) union as string concatenation, 
hence we write u\U2 for u\ L)U2- Moreover, we shall write u(a) for the number of occurrences of a 
in multiset u. For the sake of legibility, we shall write u — > v/,v {v/ ; }|d for the generic evolution rule 
u (v ft , here) (v ,out)(yi, in h )...(y n , in hi )\ D . 

The abstract syntax of the P Algebra is defined as follows. 

Definition 2 (P Algebra). The abstract syntax of membrane contents c, membranes m, and membrane 
systems ms is given by the following grammar, where I ranges over IN and a over V: 

c ::= (0,0) j {u^v h v o {v h }\ D ,0) \ (0,«) | cUc 
m ::= [/c] ; 

ms ::= ms \ ms | p(m,ms) | F(m) 

A membrane content c represents a pair u), where M is a set of evolution rules and u is a multiset 
of objects. A membrane content is obtained through the union operation _U_ from constants representing 
single evolution rules and single objects, and can be plugged into a membrane with label / by means of 
the operation of membranes m. Hence, given a membrane content c representing the pair (£%,u) 
and I G IN, [ic], represents the membrane having / as label, ^ as evolution rules and u as objects. 

Membrane systems ms have the following meaning: ms\ \ ms2 represents the juxtaposition of ms\ 
and ms2, p(m,ms) represents the hierarchical composition of m and ms, namely the containment of ms 
in m, and F{m) represents aflat membrane, namely it states that m does not contain any child membrane. 
Juxtaposition is used to group sibling membranes, namely membranes all having the same parent in a 
membrane structure. This operation allows hierarchical composition p to be defined as a binary operator 
on a single membrane (the parent) and a juxtaposition of membranes (all the children). 
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Note that every P System has a corresponding membrane system in the P Algebra, and that there 
exist membrane systems which do not correspond to any P System. 

In what follows we will often write [[/c]] ; for F([/c] / ). We shall also often write (M,u) where 
M = {r\, . .. ,r„} is a set of rules and u = o\ . . .o m a multiset of objects rather than (n, 0) U . . . U (r„,0) U 
(0,oi) U . . . U (0,o m ). Moreover, we shall often omit parentheses around membrane contents. 

The semantics of the P Algebra is given as a labelled transition system (LTS). The labels of the LTS 
can be of the following forms: 

• (w, v, v',D,/, 0^,Cr-), describing a computation step performed by a membrane content c, where: 

- u is the multiset of objects consumed by the application of evolution rules in c, as it results 
from the composition, by means of _U_, of the constants representing these evolution rules. 

- v is the multiset of objects in c offered for the application of the evolution rules, as it results 
from the composition, by means of _U_, of the constants representing these objects. When 
operation is applied to c, it is required that v and u coincide. 

- v' is the multiset of objects in c that are not used to apply any evolution rule and, therefore, 
are not consumed, as it results from the composition, by means of _ U _, of the constants 
representing these objects. 

- D is a set of promoters and inhibitors required to be present and absent, respectively, by 
the application of evolution rules in c. More precisely, D contains all the inhibitors of the 
applied evolution rules in c, whereas D + is a subset of the promoters of those rules. Such a 
subset contains only those objects that are not present in the multiset of objects of c. 

- I is the multiset of objects received as input from the parent membrane and from the child 
membranes. 

- is the multiset of objects sent as an output to the parent membrane. 

- is a set of pairs (h,vi^) describing the multiset of objects sent as an output to each child 
membrane /,. 

• O^, 0^,app), describing a computation step performed by a membrane m, where: is a 
set containing only the pair (1,1) where / is the label of m and / is the multiset of objects received 
by m as input from the parent membrane, V is the multisets of objects received from the child 
membranes of m, and and are as in the previous case. Finally, app 6 {0, 1} is equal to if 
no rule has been applied in m in the described computation step, and it is equal to 1 otherwise. 

• ,app), describing a computation step performed by a membrane system ms, where 
Cfi and app are as in the previous cases. 

For the sake of legibility, in transitions with labels of the first form we shall write the first four 
elements of the label under the arrow denoting the transition and the other elements over the arrow. Now, 
LTS transitions are defined through SOS rules I2TI . We give here a very short explanation of such rules. 
Please, refer to [7 ] for more details. 

We start by giving in Fig. [I] the transition rules for membrane contents. Rule (mcl n ) describes n 
simultaneous applications of an evolution rule for any n G IN. Rule (mc2) describes the case in which 
an evolution rule is not applied because a subset D' of the promoters and inhibitors in D it requires to 
be present and absent, respectively, are assumed not to satisfy the requirements. Rules (mc3), (mc4) and 
(mc5) describe the transitions performed by membrane contents consisting of a single object and the 
transitions performed by an empty membrane content. 

Rule (u\) describes the behaviour of a union of membrane contents. In this transition rule we use 
some auxiliary notations. Given two sets o\ and o\ representing two outputs to inner membranes, 
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7 G V* n G IN 



(u -t VhVo{vit}\D,0) (u ->■ V/,V {v/,.}|z},7v£) 

W ,0,0,D 

/ G V* D' C^D D' ^ 

(m v ft v o {v;.}| D ,0) — — — — ► (m V/,V„{v; }| D ,7) 
0,0.0,0' 



(mcl„) 



(mc2) 



lev* lev* 

(mc3) — — (mc4) 



(0,a) — >■ (0,7) (0,a) — >(0,la) 



lev* 



, . 7.0,0 , 

(0,0) - ' •— > (0,7) 



7 1 ,oj,oj 7 2 .0|,0^ 

x\ —t y\ x 2 — ■> y2 



(mc5) 



(Z^UDr)nSet(viv' 1 V2v' 2 )=0 D!n-D 2 = D= (D 1 D 2 )\Set(v 1 v' 1 y 2 y' 2 ) 
xi Ux 2 — >y\ Uyi 

M l U 2: V l V 2; V l V 2'^ 



Figure 1: Transition rules for membrane contents and unions of membrane contents. 

we write o|U]n6>^ to denote the set {(/,kv) | (/,») G oj A (Z,v) G 6>^}U{(/,77) | (/,«) G 6>{ A^v.(Z,v) G 
^}U{(Z,v)|(/,v) G O^A$u.{l,u) G C?{}. 

In Fig. [2] we give transition rules for individual membranes, juxtaposition and hierarchical compo- 
sition. Note that from the transition label of the membrane content we have no information about the 
objects that have been produced by the applied evolution rules. Rules (ml) and (m2) describe the tran- 
sitions performed by a membrane with label Z. In particular, (ml) describes the case in which no objects 
are received as an input from the external membrane, while (ml) describes the case in which a multiset 
of objects 7i 7^ is received. In these rules app is set to zero if no evolution rule is applied (u = 0), 
and it is set to one if at least one rule is applied (u ^ 0). Rule (/ml) allows us to infer the behaviour of 
a flat membrane [[/c]]; = F([/c] ; ) from the behaviour of membrane \ic\. Rule (jwcl) allows us to infer 
the behaviour of a juxtaposition of two membrane structures from the behaviours of the two structures. 
Finally, rule (hi) describes the behaviour of a hierarchical composition of membranes. In this rule we 
assume — to be an equivalence relation on sets of pairs (I, u) with Z G IN and u G V*, such that, given two 
such sets J x and J 2 , then J x - J 2 holds if and only if (J\ \{(Z,0) 1 1 G IN}) = ( J 2 \{(l, 0) | Z G IN}). 
In the last two rules app is set to one if at least one between app\ and app2 is equal to one, namely 
app = max(appi,app2)- This means that at least one rule has been applied in the whole composition. 

We conclude by defining a system trace as a sequence of internal information given by an execution of 
a P Algebra term. We assume that the system can send objects out of the outmost membrane, but cannot 
receive objects from outside. This requirement corresponds to the fact that in a P System objects cannot 
be received by the outmost membrane from the external environment. Note that executions containing 
steps in which no rule is applied, namely those with as last element of the label, are not considered. 

Definition 3 (Trace). A trace of a membrane system ms with alphabet V is a (possibly infinite) sequence 
w of outputs such that, for any o\ and msi with i G IN + 
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i,o\o± ifu = , 

x >y app = < Z3 + = 

u.u.v'.d 1 otherwise 

— : 

[/*]/ : ► ky]/ 

hh,o^,o l |0 ifw = , . 

jc — ► y app = < D+ = /i 7^ 

u,u.y',D I 1 otherwise 

r i {(/./iHA.O^oW 



(m2) 



J^-l-,0,Ol',0,app c^i,Oj,appi J ! 2,o\,app2 

X n *1 ^l *2 >yi ,. . 

(f ml ) n- — ; ; u uxl ) 



Xl yi x 2 y2 j^ 2 t = / t 



Sf,o[,max(app 1 ,app 2 ) 

li{xi,x2) > niyi,y2) 



(hi) 



Figure 2: Rules for individual membranes and hierarchical composition of membranes 

^t^t , >°i' 1 '°2= i 0,01.1 

• w = U[ U 2 ■ ■ ■ O n and ms > ms\ > . . . > ms n — -f-^r 

or 

t t t ®,o\,l 0,03,1 

• w = 0[ 2 • • ■ On ■ ■ ■ and ms > ms\ > ms2 — > 

We denote with 2? the set of all traces. 



3 Testing framework 

We first introduce the concept of context in case of P Systems expressed as P Algebra terms. Using this 
concept, we then define what we consider an observer, which is again a P Algebra term with certain 
characteristics. This leads naturally to the definition of computations of a running test, i.e. a tested 
system running together with an observer. Then, following the classical definition of |[T3ll . we define 
the success of a test in the two well-known versions of may and must. Finally, the testing preorder is 
introduced, together with the induced equivalence relation. 

3.1 Contexts and test satisfaction 

At a first look, a natural candidate for context of a P System is another P System, which we call observer, 
consisting of a membrane structure in which the skin membrane contains several membranes (with pos- 
sibly sub-membranes) one of which is a "hole", i.e., a place where another fully defined P System can 
be placed and run. The skin membrane of this tested P System instantiate^] the "hole" membrane and 
becomes a full component of the running test. 

2 This instantiation process may require some trivial modifications of the tested P System, such as a-conversion of the 
numbers assigned to the skin and inner membranes. 
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However, in O, a result regarding flattening P Systems in P Algebra is presented. A similar result 
can be found in JHJ . The flattening process of ||6] reduces any P System, specified in P Algebra with 
promoters and inhibitors, into a flat one (i.e., with no internal membranes) that is bisimilar to the original 
one. The notion of bisimulation is the one, based on computation steps, defined in [7]. These results 
suggested us to simplify, without loss of generality, the notion of context we are defining. For this reason, 
instead of considering an observer of the form \i(m,ms\ \ ms2 | • • • | ms n | □), we will always consider the 
equivalent observer \i(nf ', □) where m' results from the flattening process of \i(m,ms\ \ msi | • • • | ms n ). 

Another ingredient of the testing framework is needed to distinguish formally P Systems that are 
observers from P Systems that are normal, testable processes. In classical testing a particular action, 
usually called ft), is used to denote the "success" of a test, that is to say, if the running test is able to 
perform this action then the computation under consideration is a successful one. This easily translates 
in our framework: we introduction a fresh, particular object, ft) V that, when sent out of the skin 
membrane of the running test, denotes the "success" of the computation. 

Definition 4 (Observer). Let V be the alphabet of objects and let ft) ^ V be a particular object. An 
observer system, or simply a test, is a P Algebra term of the form n (m, □) where m is the skin membrane 
[i c]j, □ is an unspecified membrane ms numbered 2 and each rule ofm is of the form u — > v/,ft) {v/ 2 }|£). 
In other words, m communicates with its only child membrane 2 and can send out only ft) objects. 

Definition 5 (Running test). Let V be the alphabet of objects and let ft) V be a particular object. Let 
H(m, □) be an observer system and let ms be term in P Algebra denoting a closed membrane (i.e., of 
the form F{— ) or , —)). The running test is the P Algebra term fj,(m,ms') where ms' is the term ms 
in which the former skin membrane (numbered 1 ) is re-labelled in 2 and the other internal membranes 
numbers are a-converted in order not to collide with 1 and 2 ( the re-labelling of the membrane names of 
course implies also applying the substitutions to all the references to the membrane names in the term.) 

Definition 6 (Computations). Let }l(m,ms) be a running test. A computation c of fj,(m,ms) is any 
sequence of the form: 

. „ . , \ 0,0.1 0,0.1 0,0,1 0,0,1 

• c is finite: jJ,(m,ms) = mso > ms\ > . . . — — > ms n — —jh- 

or 

. . _ . , , 0,0,1 0,0,1 0,0,1 

• c is infinite: fj,(m,ms) = mso — — > ms\ > ms-i > .... 

A computation is called successful if there are k £ IN and n 6 IN + such that ms^ — - — ms/c+i, i.e., at 
least a success symbol can be sent out of the skin membrane along the run. A membrane like ms^, from 
which a transition can be taken that sends out at least one ft) object is called success membrane. We may 
also write ms^ to indicate that ms^ is a success membrane. 

Note that, as usual in testing frameworks, we consider only the behaviours of the running test in 
which no output is produced (this corresponds to considering only T computations in a CCS-like Process 
Algebra). This is needed to explore all possible behaviours of the tested system while running together 
with the observer. Note that an unsuccessful computation, i.e. one with no success state along it, can be 
either finite or infinite. In testing theories divergence must have a delicate treatment because it can lead to 
different testing preorders |[T3l l9ll. For simplicity we port here the original formulation of |[T3l . Thus, we 
define a unary predicate ms f meaning that, with respect to success, the "state" ms along a computation 
is "underdefined" because it leads to a divergent computation. 
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Definition 7 (Divergence). Let c be a computation of a running test n(m,ms). c is divergent, which we 
denote by c ^ iff: 

• c is unsuccessful, or 

• c contains a membrane ms such that ms "\ and there is not a success membrane ms' preceding ms 
in c. 

We now have all the ingredients to define the success of a test. Following the classical approach, 
such a definition comes into version: a may satisfaction, weaker, and a must satisfaction, stronger. 

Definition 8 (Satisfaction of a test). Let \l{m, □ ) be a test and ms be a closed membrane. Then we say: 

• ms may jJ-(m, □) iff there exists a computation c of jj,(m,ms) and k E IN such that 

, N 0.0.1 0.0.1 0,0,1 
c : /I [m, ms) = msQ — — — > ms\ — — > ■ ■ ■ > ms^ 

and msic A- . 

• ms must /J.(m, □ ) iff for each computation c of fj,(m,ms), 

. s 0,0.1 0,0,1 0,0,1 

c : \l [m, ms) = mso -> ms\ > ms2 > ■ ■ ■ 

the following conditions hold: 

( i) there is n £ IN such that ms n — > 

(ii) if there is k E IN such that msk t> then there exists k' <k such that ms^ — > . 

Note that, in case of must satisfaction, computations can be infinite, but it is required that a success 
state is present just at the beginning of divergence, or before. 

3.2 Testing preorders and testing equivalences 

Using the definitions of satisfaction of a test, we naturally derive preorders between membrane systems. 

Definition 9. Let ms\ and ms2 two closed membrane systems. We define two relations C.™ and 
between closed membrane systems as follows: 

• ms\ ms2 iff for each observer ju (m,n), ms\ may ju(m, □) => msi may ju(m, □) 

• ms\ ms2 iff for each observer /i(m, ms\ must n(m, □) ms2 must ju(m, □) 
Proposition 1. The relations and are preorders. 

Definition 10 (Testing equivalence). We say that ms\ is may testing equivalent to ms2, and write ms\ ss™ 
ms2, iffms\ ms 2 and ms2 C'f* ms\. 

Analogously, we say that ms\ is must testing equivalent to ms2, and write ms\ ray ms2, iff ms\ C. T ms2 
and ms2 Er ms\. 

Since the defined relations are kernels of preorders, it is easy to conclude that they are equivalence 
relations. 

In Q some equivalence relations are defined between the terms of P Algebra. Among them, we con- 
sider bisimulation, denoted by th, and trace equivalence, denoted by «7>. We show that the relationships 
between these two equivalences with the must testing equivalence are the same that hold when classical 
process calculi, as CCS, are considered ITT31 . 

Proposition 2. Let and ~7> as above. Then, ~ C ss r C ~Tr- 
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out) 
/?-»(/*. out) 

y->(y, out) 

_2 

f— >a a— >£>(a, out) 

a— > c{a , out) 
6-»(/J,aut) t 
c-»(y, out) 



a— g 

a '/J — >(co, out) 
tf^(tf,in 2 ) 



a->(a,aut) y^(y- out) 
0-»(0,out) in 2 ) 



t— >a a— >£>(a, out) 
a— >c(a, out) t 
ft->(/J,out) c^(£,out 
c-»(y, out) | ^ 



(A) 



Figure 3: Two membrane systems, (a) and (c), that are trace equivalent, but not test equivalent, together 
with the observer (b) that distinguishes them. 

Proof. The two set inclusions can be proved rephrasing the argument used for CCS [ 13]. Regarding the 
strictness of the inclusions, Figure[3]shows two systems that are trace equivalent, but can be distinguished 
by the shown observer. Not that both systems perform the set of traces {0(a)(/$),0(ce)(y)}. However, 
considering the must testing, the observer shown in Figure[3^ft) is not satisfied by the system (a) because 
in one computation, after a, only yean be produced, thus that computation is unsuccessful. Conversely, 
for the other system (c) all computations are successful. Note that inhibitors and promoters are used in 
this settings to select only specific paths in the system. In the classical setting of testing for synchronous 
calculi this role is played by the parallel operator together with the restriction on observing only T- 
computations. 

Figure [4] shows two systems that are test equivalent, but not bisimilar. Below each system the graph 
of possible transitions^] is depicted, in order to show that bisimulation does not hold. □ 



4 Example of testing scenario 

In this section we model a population of individuals that can reproduce both sexually and asexually. 
We define different observers to show the expressiveness of the defined testing framework. It is worth 
noting that quantitative aspects of systems can be easily expressed. Note that the defined observers 
are very specific and are intended to only show the capabilities of the framework introduced above. In 
particular, they should not be intended as examples of verification, because this analysis is to be done by 
checking the testing equivalence between the system and its expected behaviour, modelled as a simpler 
"specification" P system. 

Most animal species use sexual reproduction to produce offspring, while a minority of species re- 
produce asexually by producing clones of the mother. Both strategies have advantages and weaknesses. 

3 For the sake of legibility, we omit the third field in the transition labels. 
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(6) o -o 



O X 
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Figure 4: Two membrane systems that are test equivalent, but not bisimilar, together with their graph of 
transitions. 

During sexual reproduction genes from two individuals are combined in the offspring that receives ge- 
netic material from both parents involving, in diploid populations, recombination among genes. Recom- 
bination can break up favourable sets of genes accumulated by selection. Moreover, asexual populations 
composed by only females can reproduce twice as fast in each generation than sexual populations, be- 
cause there is no need to produce males for ongoing reproduction. 

Despite its considerable cost, sexual reproduction it is still by far the most frequent mode of repro- 
duction in vertebrates. Asexual reproduction has only been described in less than 0.1% of vertebrate 
species. In general, it is assumed that sexually reproducing populations harbour more genetic variation 
than asexually reproducing populations, and a high level of genetic variation allows perpetual adaptation 
to changing environments. 

Particularly, populations in heterogeneous habitats, threatened by various parasites or under strong 
competition, have been shown to have greater genetic variation. For the above reasons a variety of species 
(essentially among invertebrates) adopted a mixed strategy which tries to combine the advantages of both 
methods E41 

In this example we model a simple organism able to reproduce either sexually or asexually. We 
consider the individual of the species as diploid with only a locus (gene), thus each genotype is composed 
by a pair (01,02) °f alleles which the two chromosomes have for the gene. Moreover, we consider the 
sex of individuals, thus each of them is represented by a pair of alleles together with the symbol, / or 
m, of the sex. The rules controlling the evolution of the population are reproduction rules, either sexual 
reproduction rules or asexual, and death rules. Each rule has an inhibitor; when the inhibitor is present 
the rule cannot be applied. 

Consider a set of alleles (values for the single gene) of k elements {vi,V2, . ■ • ,Vfc}. In the following 
belong to {vi,V2, ... ,v^}. The reproduction rules are the following: 

1. a x a 2 m a 3 a A f -)■ a\a 2 m a 3 a 4 f ajCijS \^ n o_sex_re P r (i £ {1,2}, 7 € {3, 4}, s £ {m,f}) 

2. a\a 2 j '— )■ ci\a 2 f a\a 2 f \^ no _ asex _ repr 
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Note that each rule has its inhibitor no_sex_repr or no_asex_repr. The death rules are the following: 

3. a\a 2 m — > X \^no_male_death 

4. a\a 2 f y A. | ^no_female_death 

We add also rules for females and males which simply survive, without reproducing or dying: 

5. a\a 2 m — > a\a 2 m \^ n o_male_life 

6. a\aif — > a\a<lf \^noJemale_life 

Finally we use a rule for sending out individuals from the membrane in which the population evolved. 
This rule is promoted by the promoter send_out: 

7. a\a 2 m^t (a\a 2 m, out) \ sen d_out 

8. a\a 2 f — > (a\a 2 f, out) \ sen d_out 

In the following examples, we consider the membrane system defined above as the system under 
test. In each example we define a specific observer that is meant to test the evolution forcing certain 
situations. The observer controls the system by sending into it both the initial individuals and the pro- 
moters/inhibitors for constraining the population dynamics. 

Example 1. Let us consider a population in which the possible alleles for the single locus are {0, 1} and 
an initial population composed by four males of genotype (00) and four females of genotype (01). Let 
us control the population dynamics by inhibiting both the sexual reproduction and the death of females. 
The observer we define, using the must version, is able to analyse the following property of the system: 
"After two time units, no female in the population can differ from the initial ones, and the number of such 
females is greater than or equal to the initial female number. " 

Note that naturally the tests express quantitative aspects, both on time and on numbers of individuals. 
Assume that membrane 1, i.e. the observer, initially contains the element a and that Inh is the set of all 
inhibitors, the rules in membrane 1 are the following: 

lo- a— y 1 ((00m) 4 , (01 f) 4 ,no_sex_repr,no_female_death, in 2 ) 

2q. l->2 

3q. 2—7-3 (Inh Li {send_out} , in 2 ) 

4 . 3^4 

5o- a\a%f —y fail (a\ 7^ OVai 7^ 1) 

6 . 4^5 

7 . 5 (01/) 4 -)■ (to, out) \^ faU 

Rule lo sends into the membrane under test the initial population (four males and four females) and 
the inhibitors for sexual reproduction and death of females. Rule 2q waits for a time unit, and, after 
that, Rule 3o sends, during the second step of the populations evolution, all the inhibitors together with 
the promoter send_out. Rule 4o waits for a time unit to allow the inner membrane to send out all the 
individuals. Afterwards, Rule 5o produces a fail if a female different from the initial ones is present. 
At the same time Rule 60 increases the counter. Finally, Rule 1q sends out the CO symbol only if fail is 
absent. 

Example 2. Consider the initial population of Example [7] under the same conditions. Again using a 
must test, we consider the following property: "Given any k G N, we can check that it is not possible, 
in n time units, for all n S [l,k], to produce a female different from the initial ones." Note that this 
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property is not afor-all statement: we count until the given kfor checking it. 
than checking thefor-all statement. 

The rules in membrane 1 are the following: 



This is of course weaker 



1 

lo- 


a— )■ 1 /?/<9<?/c [(UUmJ , (UljJ ^nojsex. 




1 — ? L 


3o. 


2^3 


Icq. 


->-jfe 


(* + l)o- 


Woc& — > block 


(* + 2) . 


blocks V (MU {send_out} , ini) 


lo- 




z o- 


a.\a%f ^ fail (ai^OVai^l) 


3 Q . 


2' ^3' 


4' 


3' -)■ (a>, owf) |-, /a(7 



Rules from 2q to ko increase the counter until k. At each time unit either Rule (k + 2)o can &e executed, 
stopping the evolution of the population, or Rule (k+ l)o can be fired, allowing the population to evolve 
for one more step. Rule (k+ l)o is inhibited by k, thus when the counter reaches k the evolution must 
terminate. Rules from 1' to 4q produce a CO if and only if, in the final populations there are only females 
equal to the initial ones. 

Example 3. Consider the initial population of Example [7J This time let us consider a may test ex- 
pressing the following: "Without initial conditions it is possible to have recombination (offspring with 
different genotypes with respect to the initial population) after k steps. " 

The rules are the following: 



1 . a -> 1 block ((00m) 4 , (01/) 4 , in 2 ) 

2q. l-»2 
3 . 2^3 



k[). k—l^-k 

(A; + l)o- k—tV (InhU{send_out}, in%) 

l' Q . l'^2' 

2q. a\a%f — ^ (ft), out) (a\ ^ OV^i ^ 1) 

2q. a\a%m — >■ (to, out) (ai^OVai^l) 



Example 4. Consider again the initial population of Example [JJ Let us define a may test expressing: 
"By allowing only the asexual reproduction for k steps, and then allowing only the sexual reproduction 
for the following k steps, it is possible to have recombination in the final population. " 

For this example we need the concept of antidote. An antidote is a symbol able to remove the effect 
of an inhibitor, usually for an inhibitor x, the antidote is denoted by anti_x. The effect of an antidote is 
described by particular rules, the antidote rules, which have the form anti_x x — > X. In this example we 
assume that, in the membrane under test, there are the antidote rules for the inhibitors no_sex_repr and 
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no_sex_repr. The rules are the following: 



lo. 
2„. 



a — > 1 »/oc& ((00m) 4 , (01/) ,no_sex_repr, in-i) 



l-»2 



(* + l)o 



£ — 1 — >■ (anti_no_sex_repr,no_asex_repr, iwi) 




k-^k+l 

2fc— 1 — >• 1' (InhU {send_out} , inj) 



l'-»2' 

o-xdlf — > (fiJ, 0M?) (ai T^OVai ^ 1) 
a\aim — >■ (to, ottf) («i / OVai 7^ 1) 



5 Conclusions 

The testing machinery defined in lfT3l and the P Algebra proposed in JfQ inspired us a suitable Process 
Algebra-based testing environment for P Systems. On the one hand, the new testing environment shares 
with the original one the concepts of observer, running test, successful and unsuccessful computation, 
testing preorders/equi valences, allowing us to define qualitative system properties. On the other hand, 
differently from the original one, it results to be suitable also to express quantitative aspects. Such a 
feature puts in evidence an expected high expressive power of the framework itself, which needs to be 
formally studied. 

The natural continuation of this work is to find finite decidable characterizations of testing equiv- 
alence of finite state P Algebra terms in order to perform verification by comparing a system with its 
expected behaviour. Moreover, we plan to extend the testing environment also studying a suitable ver- 
sion of fair testing semantics for P Systems, as well as rephrasing the testing environment for Spatial 
P Systems Q, with the aim of expressing quantitative properties involving spatial information, being 
crucial in the biological (and not only) domain. 

On the biological side, we intend to show as future work the potentials of the testing framework of 
having a practical impact, for instance on planning both in-silico and wet-lab experiments. 
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